foo<script>scr</script>